Human rights investigators are increasingly using open-source, user-generated content scraped from online platforms as crucial digital evidence for human rights advocacy, accountability and analysis (witness accounts, footage of protests and state violence, etc.). This workshop will explore the intersection between the good-faith documentation of sensitive data on human rights violations and data protection and privacy standards. We aim to collaboratively answer the following questions: 1) What data protection standards should apply to gathering and processing such content and how? 2) How can data protection and privacy regulation negatively impact or impede digital evidence gathering and processing? 3) How can sensitive content be archived in challenging political contexts with restricted right to privacy and sophisticated surveillance? The workshop will provide the audience with a short brief on the topic, followed by an interactive exercise simulating both sides of the argument and a guided discussion to share and summarize findings.